idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update Angular dangerous functions

Browse Source
This commit is contained in:
Mostafa Lavaei
2020-01-31 17:26:08 +03:30
parent 916d54df11
commit d6c7306f44
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -1,3 +1,4 @@
.DS_Store .DS_Store
.*.icloud .*.icloud
.gitkeep .gitkeep
.idea

6
Pattern-Matching/dangerous-functions-angular.txt
View File

@@ -1,8 +1,14 @@
# Angular pipes
bypassSecurityTrustHtml bypassSecurityTrustHtml
bypassSecurityTrustScript bypassSecurityTrustScript
bypassSecurityTrustStyle bypassSecurityTrustStyle
bypassSecurityTrustUrl bypassSecurityTrustUrl
bypassSecurityTrustResourceUrl bypassSecurityTrustResourceUrl
# Angular inputs
[innerHTML] //Insert given HTML without escaping dangerous characters
# angular.js (aka Angular 1)
trustAsHtml trustAsHtml
$eval $eval
$evalAsync $evalAsync